This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa File: 795bae65-e494-4497-8c64-6c78c5a4b388.roa (raw, json) Hash identifier: TfvhZta+JZterNVrjIgY/cN26rMxngtoFFrb7utiMNY= Subject key identifier: 43:EC:DF:9D:DE:46:6B:D4:A1:80:C4:D1:09:7C:D5:5B:F7:9F:53:19 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 02C49EAFB57922BD2DC89B9A41573C62F2F49E96 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa Signing time: Thu 11 Dec 2025 01:00:25 +0000 ROA not before: Thu 11 Dec 2025 01:00:25 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.0.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c4:9e:af:b5:79:22:bd:2d:c8:9b:9a:41:57:3c:62:f2:f4:9e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 11 01:00:25 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=3e2f675008dafc99229b6550dd4351dcd4548de75e72cd55a7a92affc91f6667, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:4a:9e:7f:91:57:61:48:31:d1:54:a9:3b: db:4e:be:9f:d3:5f:27:fd:c4:e6:82:a0:18:12:dd: cd:c9:c9:40:93:ff:e3:35:88:7a:91:4e:1b:d5:75: 89:f9:09:c7:25:1c:a1:3e:8a:76:63:3c:72:b6:9b: e9:e1:95:7c:36:a2:98:df:90:1e:9e:24:97:44:32: c7:14:98:13:49:af:e1:83:10:30:13:f8:22:2e:17: 47:bb:27:54:c2:1e:0f:b0:04:74:c7:a0:dd:f4:b9: e6:64:b9:a9:a8:60:a1:e7:29:84:9d:f1:eb:a6:de: a0:08:a9:b6:ad:71:95:8b:40:46:39:19:b3:06:8f: 6d:03:23:c3:39:91:9e:37:db:d0:e3:3d:25:b6:33: bc:e8:89:5d:df:11:3c:0e:3e:d6:22:7a:7b:8f:15: 66:bd:11:99:67:fb:cd:a7:b1:f4:4f:e2:a6:ce:c8: 90:06:a8:34:f7:8e:38:f9:b1:38:3a:b2:a4:53:16: ef:98:a3:70:d5:77:29:84:27:90:ec:36:ec:f7:f7: 60:40:02:72:f1:ab:70:58:e3:73:62:72:31:82:d0: 12:45:73:ce:e3:c0:7f:3a:7c:a7:0f:d8:27:d9:17: 41:29:17:5b:fa:73:a1:9f:e8:fd:cb:0d:3e:2e:28: 39:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:DF:9D:DE:46:6B:D4:A1:80:C4:D1:09:7C:D5:5B:F7:9F:53:19 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.0.104.0/21 Signature Algorithm: sha256WithRSAEncryption 35:4f:6b:6b:1b:45:e5:84:8d:e8:ac:0f:0d:f9:1c:2d:41:73: a4:d4:4e:0a:c5:54:51:96:10:a3:1e:71:2b:29:7e:44:67:dd: 31:da:17:fd:ae:cc:20:0f:68:56:dd:43:ac:da:b5:37:f5:cb: b0:f0:a2:e2:9b:32:99:d5:3b:8e:4a:db:cb:bb:e4:8e:73:37: 50:6d:dd:79:07:de:21:b7:17:0f:2a:7e:19:e1:9e:ad:c8:b8: c7:bc:69:9a:75:73:31:31:cb:1f:f1:7f:fb:c6:c8:ad:47:84: 4b:0b:c2:a4:b7:59:e2:84:1a:36:c2:99:b9:9a:04:aa:a5:40: 28:e8:b2:73:26:8e:56:1b:cc:80:51:e0:ca:2f:c7:b5:6a:1a: d1:c5:b0:95:fe:86:1c:8f:4c:20:aa:c0:41:f9:1b:46:2f:db: 08:83:90:9e:c0:1f:07:49:57:13:a7:f6:5e:e2:41:ae:5a:3f: 51:04:1d:c7:2e:36:f5:74:f9:e4:ed:2c:06:0b:c0:82:a2:ed: d9:a8:8f:c3:4a:c7:28:14:26:65:a3:78:52:c8:d1:a3:6e:10: b1:77:7d:45:13:9f:dd:9d:ab:aa:f4:2e:be:59:a0:40:e9:a8: 75:50:91:2b:18:04:58:2b:c2:12:25:23:6b:0b:84:e9:66:03: 80:85:76:84 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUAsSer7V5Ir0tyJuaQVc8YvL0npYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMTEwMTAwMjVaFw0yNjAzMTEyMzU5NTlaMHoxSTBHBgNV BAUTQDNlMmY2NzUwMDhkYWZjOTkyMjliNjU1MGRkNDM1MWRjZDQ1NDhkZTc1ZTcy Y2Q1NWE3YTkyYWZmYzkxZjY2NjcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXpSp5/kVdhSDHRVKk7206+n9NfJ/3E5oKgGBLdzcnJQJP/4zWIepFOG9V1 ifkJxyUcoT6KdmM8crab6eGVfDaimN+QHp4kl0QyxxSYE0mv4YMQMBP4Ii4XR7sn VMIeD7AEdMeg3fS55mS5qahgoecphJ3x66beoAiptq1xlYtARjkZswaPbQMjwzmR njfb0OM9JbYzvOiJXd8RPA4+1iJ6e48VZr0RmWf7zaex9E/ips7IkAaoNPeOOPmx ODqypFMW75ijcNV3KYQnkOw27Pf3YEACcvGrcFjjc2JyMYLQEkVzzuPAfzp8pw/Y J9kXQSkXW/pzoZ/o/csNPi4oOYcCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRD7N+d 3kZr1KGAxNEJfNVb959TGTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv Nzk1YmFlNjUtZTQ5NC00NDk3LThjNjQtNmM3OGM1YTRiMzg4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzMAaDAN BgkqhkiG9w0BAQsFAAOCAQEANU9raxtF5YSN6KwPDfkcLUFzpNROCsVUUZYQox5x Kyl+RGfdMdoX/a7MIA9oVt1DrNq1N/XLsPCi4psymdU7jkrby7vkjnM3UG3deQfe IbcXDyp+GeGerci4x7xpmnVzMTHLH/F/+8bIrUeESwvCpLdZ4oQaNsKZuZoEqqVA KOiycyaOVhvMgFHgyi/HtWoa0cWwlf6GHI9MIKrAQfkbRi/bCIOQnsAfB0lXE6f2 XuJBrlo/UQQdxy429XT55O0sBgvAgqLt2aiPw0rHKBQmZaN4UsjRo24QsXd9RROf 3Z2rqvQuvlmgQOmodVCRKxgEWCvCEiUjawuE6WYDgIV2hA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:42:11 2025 by rpki-client